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1 1 . A method of accessing an encrypted track on a removable media with a 

2 device, the track comprising frames having content, the method comprising: 

3 authorizing the media; 

4 decrypting the track by a process comprising: 

M< 5 (a) calculating a media unique key; and thereafter 

r| 6 (b) decrypting a title key stored in the memory of the device with the 

7 media unique key; and thereafter 

111 8 (c) decrypting a group of frames; and thereafter 

f<y 9 (d) deleting the decrypted title key; 

J 10 (e) deleting the media unique key; and 

1 1 (f) repeating (a) through (e) until the entire track is completed. 

1 2. The method of claim 1, wherein authorizing the media comprises: 

2 calculating a media key; and thereafter 

3 calculating a media unique key from the media key; and thereafter 

4 deleting the media key; and thereafter 

5 calculating a session key from the media unique key; and thereafter 

6 deleting the media unique key. 

1 3. The method of claim I, further comprising: 
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2 decrypting a doubly encrypted title key stored in the media with a session key 

3 calculated while authorizing the media to produce a singly encrypted title key; and 

4 copying the singly encrypted title key from the media into a memory of the 

5 device. 

1 4. The method of claim 2, wherein calculating the media key comprises: 

2 (a) reading a first record of a media key block from a buffer; 

3 (b) updating the buffer offset based on the length and type of the first record; 

4 (c) reading another record of the media key block at the updated buffer offset; 

5 and 

6 (d) repeating (a) - (c) until all necessary records of the media key block are 

7 read and the media key is calculated. 

1 5. The method of claim 1 , wherein the group of frames comprises less than one 

2 to about five seconds of content in a decoded or decompressed form. 

1 6. The method of claim 1 , wherein decrypting the track comprises decrypting one 

2 or more files, the files comprising the frames. 

1 7. The method of claim 1 , further comprising decoding and decompressing the 

2 track. 



1 8. A method of accessing an encrypted data file on a removable media with a 

2 device, the data file comprising frames having content, the method comprising: 



3 authorizing the media for a user session by a process comprising: 

4 calculating a media key; and thereafter 

5 calculating a media unique key from the media key; and thereafter 
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6 deleting the media key; and thereafter 

7 calculating a session key from the media unique key; and thereafter 

8 deleting the media unique key. 

9 decrypting a doubly encrypted title key stored in the media with the session 

1 0 key to produce a singly encrypted title key; 

1 1 copying the singly encrypted title key from the media into a memory of the 

12 device; and 

3 13 decrypting the file by a process comprising: 

{* 14 (a) calculating the media unique key; and thereafter 

" 15 O) decrypting the title key stored in the memory of the device with the 

M, 16 media unique key; and thereafter 

{ 17 (c) decrypting a group of frames; and thereafter 

M> 1 8 (d) deleting the decrypted title key; 

19 (e) deleting the media unique key; 

20 (f) repeating (a) through (e) until the entire file is completed. 

1 9. The method of claim 8, wherein calculating the media key comprises: 

2 dividing a media key block into chunks, the chunks comprising bytes of 

3 encrypted data; and 

4 encrypting a key within the media key block by setting the buffer to read at an 

5 offset within a specific chunk of the block. 

1 10. The method of claim 9, wherein decrypting the key comprises: 

2 (a) calculating a media key from first record; and 
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3 (b) updating the buffer offset; and 

4 (c) reading a second record at the updated buffer offset; and 

5 (d) verifying the media key with a second record by comparing the calculated 

6 media key with a reference media key. 

1 11. The method of claim 1 0, wherein the buffer offset is determined by the type 

2 and length of the first record of the media key block. 

Q 1 12. The method of claim 8, wherein the group of frames comprises less than one 

g 2 second to about five seconds of decompressed and decoded audio content. 

; ! LJ 1 13. A system for enabling a device to read an encrypted file having encrypted 

B 2 content from a media, and to write an encrypted file having encrypted content to a media, the 

lU 3 system comprising: 

JfJ 4 a computing unit, and a system memory; 

5 interface means for receiving commands from the device; 

6 secure dynamic decryption means configured to: 

7 (a) copy an encrypted title key from the media to a memory of the 

8 device, 

9 (b) decrypt the encrypted title key, 

10 (c) decrypt a portion of encrypted content with the decrypted title key, 

1 1 (d) delete the decrypted title key, and 

12 (e) repeat a-d such until all of the content of the file has been 

13 decrypted, and wherein the decrypted title keys reside in and are accessible 

14 only to the secure means of the system. 
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1 14. The system of claim 13, wherein the title key is in a decrypted state for the 

2 time it takes to decrypt 5 seconds or less of content in a decompressed and decoded state 

3 when played back. 

1 1 5. The system of claim 13, further comprising a digital signal processor. 

1 16. The system of claim 13, wherein the interface means and secure dynamic 

2 decryption means are stored in a system memory of the device. 

Q 1 17. The system of claim 16, wherein the interface means and secure dynamic 

'SjJ 2 decryption means are executed by the computing unit. 

[J 1 18. The system of claim 15, wherein the secure dynamic decryption means is 

2 stored in memory of the digital signal processor, and executed by the digital signal processor. 

1=5 1 19. The system of claim 18, wherein the interface means is executed by the digital 

U 2 signal processor. 

1 20. A system that enables a device to decrypt a file having encrypted content on a 

2 secure medium, the system comprising: 

3 one or more user interface modules for receiving commands from the device; 

4 an applications programming interface for receiving the commands from the 

5 one or more user interface modules and managing the retrieval and storage of 

6 encrypted content from the secure medium; 

7 a security engine for decrypting the encrypted content and the one or more 

8 encrypted keys sent from the secure medium to a memory of the device, the decrypted 

9 keys used to decrypt the encrypted content, wherein 

10 the one or more keys are contained in an encrypted data segment, and 
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1 1 the security engine (a) decrypts one or more of the keys, (b) decrypts a 

12 portion of the encrypted content using the one or more decrypted keys, and (c) 

13 deletes the one or more decrypted keys, and (d) repeats (a) - (c) until all 

14 portions of the content are decrypted. 

1 21 . The system of claim 20, wherein the content is encoded in the AAC, MP3 or 

2 WMA format. 

1 22. The system of claim 21 , wherein the one or more keys are in a decrypted state 

2 for the time it takes to decrypt and process less than one second to about five seconds of 

3 decoded content. 

1 23. The system of claim 20, wherein the data segment comprising the one or more 

2 encrypted keys is buffered and decrypted in fractional portions. 

1 24. The system of claim 23, wherein the fractional portion is about 512 bytes. 

1 25. The system of claim 20, wherein the device comprises a computing unit, 

2 system memory, and a hardware interface. 

1 26. The system of claim 20, wherein the device further comprises a digital signal 

2 processor. 

1 27. The system of claim 25, wherein the system is stored in the system memory of 

2 the device. 

1 28. The system of claim 27, wherein the software system stored in the system 

2 memory is executed by the computing unit. 

1 29. The system of claim 26, wherein the system is stored in RAM of the digital 

2 signal processor. 
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30. The system of claim 26, wherein a portion of the system is stored in the system 
memory of the device and a portion of the system is stored in RAM of the digital signal 
processor. 

3 1 . The system of claim 30, wherein the portion of the system stored in the RAM 
of the digital signal processor is executed by the digital signal processor. 

32. The system of claim 30, wherein the portion of the system stored in the RAM 
of the digital signal processor comprises the security engine. 

33 . The system of claim 20, further comprising one or more engines for 
processing and transmitting audio, video or images, each engine comprising a secure 
application programming interface, the secure interface(s) for accessing the encrypted content 
and keys of the medium, and the non-secure interface(s) for accessing the unencrypted 
content of the medium. 

34. The system of claim 33, further comprising a security manager module. 

35. The system of claim 34, wherein the secure interface(s) communicate with the 
security manager module and module communicates with the security engine. 

36. The system of claim 33, further comprising a device driver, the security engine 
accessing the content and keys through the device driver. 

37. The system of claim 33, wherein each of the one or more engines for 
processing and transmitting audio, video or images further comprising a non-secure 
application programming for accessing unencrypted content of the medium. 

38. The system of claim 20, wherein the security engine further comprises a 
random number generator, the generator utilizing two or more system timers to create the 
random number. 
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39. The system of claim 38, wherein the generator increases the natural frequency 
update of the timer ticks used to create the random number. 
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